CVE-2005-0420

Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.

Date published : 2005-02-15

http://www.securityfocus.com/bid/12459

http://seclists.org/lists/fulldisclosure/2005/Feb/0106.html